feat(deno): migrate frontend npm → Deno (standards#253 STEP 3)

[hyperpolymath]

Summary

Class B npm→Deno migration for frontend/ (per standards#253 STEP 3).

• Deletes frontend/package.json (8 deps + 6 scripts mixing bare rescript invocations and deno task wrappers)
• Updates frontend/deno.json:
  • Drops malformed task entries ("rescript": "^12.0.0" was a version string masquerading as a task)
  • Adds res:build / res:watch / res:clean tasks invoking deno run -A --node-modules-dir=auto npm:rescript <args>
  • Adds missing npm: imports for ReScript build-time deps (rescript@^12.2.0, @rescript/react@^0.12.2, @rescript/core@^1.6.1, rescript-apollo-client@^1.1.2); preserves existing esm.sh imports for runtime browser deps (react, react-dom, graphql, @apollo/client)
• Appends npm-avoidant block to root .gitignore (standards#67)

No lockfiles existed; only package.json was deleted.

Test plan

• deno task res:build succeeds in frontend/
• deno task dev resolves all imports
• Build oracle (post-merge CI) stays green

Recipe: standards/docs/migrations/npm-to-deno-template/MIGRATION.md

🤖 Generated with Claude Code

[github-actions]

🔍 Hypatia Security Scan

Findings: 45 issues detected

Severity	Count
🔴 Critical	0
🟠 High	12
🟡 Medium	33

View findings

[
  {
    "reason": "Required file missing",
    "type": "missing",
    "file": "SECURITY.md",
    "action": "create",
    "rule_module": "root_hygiene",
    "severity": "high"
  },
  {
    "reason": "Required file missing",
    "type": "missing",
    "file": "0-AI-MANIFEST.a2ml",
    "action": "create",
    "rule_module": "root_hygiene",
    "severity": "high"
  },
  {
    "reason": "No test directory or test files found",
    "type": "no_tests",
    "file": "/home/runner/work/social-media-polygraph/social-media-polygraph",
    "action": "flag",
    "rule_module": "honest_completion",
    "severity": "high",
    "deduction": 20
  },
  {
    "reason": "Action actions/setup-python@v6 needs attention",
    "type": "unpinned_action",
    "file": "ci.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action codecov/codecov-action@v6 needs attention",
    "type": "unpinned_action",
    "file": "ci.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action aquasecurity/trivy-action@master needs attention",
    "type": "unpinned_action",
    "file": "ci.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Action github/codeql-action/upload-sarif@v4.36.0 needs attention",
    "type": "unpinned_action",
    "file": "ci.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action perpolymath/standards/.github/workflows/governance-reusable.yml@main\n needs attention",
    "type": "unpinned_action",
    "file": "governance.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "No permissions declaration -- add permissions: read-all",
    "type": "missing_permissions",
    "file": "ci.yml",
    "action": "add_permissions",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "No permissions declaration -- add permissions: read-all",
    "type": "missing_permissions",
    "file": "codeql.yml",
    "action": "add_permissions",
    "rule_module": "workflow_audit",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence